Privacy Policy

Privacy Policy

Last Updated: June 6, 2025

At St. Paul Comprehensive Secondary School, we are committed to protecting the privacy and personal information of our students, parents, staff, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with applicable data protection laws.

1. Information We Collect

Student Information

We collect and maintain the following information about our students:

  • Personal details (name, date of birth, address, contact information)
  • Academic records and assessment results
  • Attendance records
  • Medical information relevant to school care
  • Photographs and videos for educational and promotional purposes
  • Behavioral records and disciplinary actions
  • Special educational needs information

Parent and Guardian Information

  • Contact details (name, address, phone numbers, email addresses)
  • Emergency contact information
  • Financial information for fee payments
  • Communication preferences
  • Consent records for various activities

Staff Information

  • Employment records and personnel files
  • Professional qualifications and certifications
  • Performance evaluations
  • Payroll and benefits information
  • Emergency contact details

Website Visitors

  • IP addresses and browser information
  • Cookies and tracking data
  • Form submissions and inquiries
  • Website usage analytics

2. How We Use Your Information

We use the collected information for the following purposes:

Educational Services

  • Providing quality education and student support
  • Tracking academic progress and performance
  • Managing attendance and school operations
  • Communicating with parents and guardians
  • Ensuring student safety and welfare

Administrative Purposes

  • Processing admissions and enrollment
  • Managing fee payments and financial records
  • Organizing school events and activities
  • Maintaining accurate student records
  • Complying with legal and regulatory requirements

Communication

  • Sending important school updates and notices
  • Emergency communications
  • Marketing school programs and events
  • Newsletter distribution (with consent)

We process personal information based on:

  • Contractual necessity: To fulfill our educational services contract
  • Legal obligation: To comply with education laws and regulations
  • Vital interests: To protect the health and safety of students and staff
  • Legitimate interests: For school administration and educational purposes
  • Consent: For marketing communications and non-essential activities

4. Information Sharing and Disclosure

We may share personal information with:

Educational Authorities

  • Department of Education
  • Examination boards
  • Educational inspectors
  • Other schools (for transfers)

Service Providers

  • IT support companies
  • Catering services
  • Transportation providers
  • Medical professionals
  • Professional consultants

Emergency Services

  • Police and law enforcement
  • Medical emergency services
  • Child protection services
  • Social services

We do not sell, rent, or trade personal information to third parties for commercial purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect personal information:

  • Secure servers and encrypted data transmission
  • Regular security updates and monitoring
  • Access controls and staff training
  • Secure physical storage of paper records
  • Regular data backups and recovery procedures

6. Data Retention

We retain personal information for the following periods:

  • Student records: 7 years after graduation or departure
  • Financial records: 7 years after completion
  • Staff records: 6 years after employment ends
  • Medical records: Until age 25 or 8 years after last entry
  • Child protection records: Until age 35
  • Website data: 2 years from collection

7. Your Rights

Under data protection laws, you have the right to:

  • Access your personal information
  • Rectify inaccurate or incomplete data
  • Erase your data in certain circumstances
  • Restrict processing of your information
  • Object to processing based on legitimate interests
  • Data portability in certain situations
  • Withdraw consent where processing is based on consent

8. Student Photography and Media

We may photograph or record students for:

  • Educational documentation
  • School promotional materials
  • Website and social media content
  • Yearbooks and school publications

Parents can opt-out of photography for promotional purposes while maintaining educational documentation rights.

9. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes through:

  • Email notifications to registered users
  • Website announcements
  • School newsletters
  • Direct communication for major changes

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Officer
St. Paul Comprehensive Secondary School 20 Imek Road, Ikot Ekpene, Nigeria

Email: stpaulcomprhensiveschool@gmail.com Phone: +234 806 769 7068 Office Hours: Monday-Friday, 8:00 AM - 5:00 PM

For complaints about data handling, you may also contact your local data protection authority.

12. Special Considerations for Minors

As an educational institution serving minors, we take extra precautions:

  • Parental consent required for non-essential data processing
  • Limited data sharing with external parties
  • Enhanced security measures for student data
  • Regular review of data processing activities
  • Staff training on child data protection

13. International Data Transfers

If we transfer data internationally, we ensure appropriate safeguards through:

  • Adequacy decisions by data protection authorities
  • Standard contractual clauses
  • Certification schemes
  • Codes of conduct

This Privacy Policy is designed to be transparent and comprehensive. If you need clarification on any aspect of our data handling practices, please don’t hesitate to contact us.